VendorsExamsEnterprise
Support
Request an ExamContact UsFAQ

Microsoft 365 Copilot and Agent Administration Fundamentals Free Sample Questions

Description

Covers core Microsoft 365 objects and security principles, Microsoft Purview's data protection and governance role for Copilot, and basic admin tasks for Copilot and agents.

22 free sample questions332 in the full practice test

Try simulator

AB-900 Sample Questions

  1. Question 1

    Beginner

    Identify the Core Features and Objects of Microsoft 365 Services ยท Core Zero Trust principles

    A global administrator at Contoso Ltd. is configuring access for a new group of external consultants. The consultants need to access specific SharePoint sites and Teams channels but should not have access to any other Microsoft 365 resources. The administrator wants to ensure that every access request is verified explicitly, regardless of where the request originates. Which security model principle is the administrator applying?

    Answer and explanation

    Correct answer: D

    The principle of 'Verify explicitly' requires that all access requests be fully authenticated, authorized, and encrypted before granting access. This matches the scenario where the administrator wants to verify every request regardless of origin. 'Assume breach' focuses on minimizing blast radius and segmenting access, while 'Use least privilege access' focuses on limiting user permissions to only what is necessary.

  2. Question 2

    Intermediate

    Perform Basic Administrative Tasks for Copilot and Agents ยท Copilot licensing models

    You are the Microsoft 365 Administrator for Litware, Inc. You need to assign licenses to a new department of 50 users. These users require access to Microsoft 365 Copilot but do not need the advanced eDiscovery and automated investigation capabilities found in the E5 license. They currently hold Microsoft 365 E3 licenses. What is the most cost-effective licensing strategy to enable Copilot for these users?

    Answer and explanation

    Correct answer: C

    Microsoft 365 Copilot is available as an add-on license. Since the users already have a prerequisite license (Microsoft 365 E3) and do not need the other features of E5, purchasing the Copilot add-on is the most cost-effective and direct solution. Upgrading to E5 would incur unnecessary costs for features not required.

  3. Question 3

    Intermediate

    Identify the Core Features and Objects of Microsoft 365 Services ยท Conditional access policies

    A security administrator needs to configure a policy that blocks sign-ins from countries where the organization has no presence, unless the user is utilizing a compliant device and multi-factor authentication (MFA). Which Microsoft Entra feature should be used to enforce this requirement logic?

    Answer and explanation

    Correct answer: C

    Conditional Access policies in Microsoft Entra ID allow administrators to create if-then statements (signals to decisions) to enforce access controls. This scenario describes a classic Conditional Access policy: IF location is X AND device is Y, THEN Grant/Block access. Identity Protection focuses more on risk-based events like leaked credentials.

  4. Question 4

    Advanced

    Understand Data Protection and Governance Tasks for Microsoft 365 and Copilot ยท How Copilot accesses data

    You are explaining to a client how Microsoft 365 Copilot processes user prompts securely. The client is concerned about their data training public models. Review the diagram below representing the Copilot architecture flow.

    flowchart LR User[User Prompt] --> Graph[Microsoft Graph] Graph --> LLM[Large Language Model] LLM --> Process[Post-Processing] Process --> Response[Response to User]

    Based on Microsoft's data protection principles for Copilot, which statement is legally and technically accurate regarding the 'Large Language Model' step?

    Answer and explanation

    Correct answer: B

    A core security principle of Microsoft 365 Copilot is that customer data (prompts and grounding data) is NOT used to train the foundation Large Language Models (LLMs). The data remains within the tenant boundary and is only used to generate the specific response for that user session.

  5. Question 5

    Intermediate

    Understand Data Protection and Governance Tasks for Microsoft 365 and Copilot ยท Microsoft Purview suite features and capabilities

    Your organization uses Microsoft Purview to manage data governance. You need to ensure that credit card numbers shared in Teams chats are automatically detected and blocked before they can be sent. Which specific Purview solution should you configure?

    Answer and explanation

    Correct answer: D

    Data Loss Prevention (DLP) is designed specifically to detect sensitive information types (like credit card numbers) and apply protective actions, such as blocking the transmission of that data in Teams chats. Communication Compliance is for detecting inappropriate conduct (harassment, threats), not necessarily structured sensitive data types like credit cards.

  6. Question 6

    Intermediate

    Understand Data Protection and Governance Tasks for Microsoft 365 and Copilot ยท DSPM for AI

    A compliance officer wants to identify if employees are using Microsoft 365 Copilot to generate code that might violate intellectual property policies. The officer needs a high-level view of AI usage trends and potential risks associated with AI applications. Which tool in the Microsoft Purview portal provides this specific visibility?

    Answer and explanation

    Correct answer: B

    DSPM for AI (Data Security Posture Management for AI) is the dedicated tool in Purview for discovering, assessing, and protecting against risks associated with AI usage, including Copilot and third-party AI apps. It provides the specific visibility into AI prompts, usage trends, and associated data risks.

  7. Question 7

    Intermediate

    Perform Basic Administrative Tasks for Copilot and Agents ยท Agent creation

    You need to create a new custom agent that can answer questions based on a specific SharePoint document library containing product manuals. This agent will be used by the customer support team within Microsoft Teams. Which tool offers the most streamlined 'no-code' experience to build this agent?

    Answer and explanation

    Correct answer: D

    Copilot Studio (formerly Power Virtual Agents) provides the Agent builder interface, a low-code/no-code environment specifically designed to create agents grounded in specific data sources like SharePoint libraries. This allows creating a targeted agent for the support team without developer skills.

  8. Question 8

    Advanced

    Understand Data Protection and Governance Tasks for Microsoft 365 and Copilot ยท Oversharing in SharePoint

    Case Study: Fabrikam Residences

    Fabrikam Residences is a property management company with 5,000 employees. They are rolling out Microsoft 365 Copilot to their Leasing Department.

    Scenario:
    The Leasing Department uses a SharePoint site called 'Lease Docs' to store sensitive contracts. The site permissions are currently set to 'Everyone except external users' with Read access because historically, all employees needed to view templates. However, the site now contains signed leases with PII.

    The IT Director is concerned that Copilot will allow any employee to summarize these signed leases, violating privacy policies. The goal is to restrict Copilot's access to this data without breaking the ability for Leasing agents to search for it manually if needed.

    Which immediate action addresses the root cause of this oversharing risk in relation to Copilot?

    Answer and explanation

    Correct answer: D

    Copilot follows the same permissions as the user. If a user has Read access to a file (via the 'Everyone' group), Copilot can access and summarize it for them. The root cause of 'oversharing' is the broad permission assignment. Restricting the SharePoint site permissions to only the relevant department ensures Copilot only accesses that data for authorized users.

  9. Question 9

    IntermediateMultiple answers

    Perform Basic Administrative Tasks for Copilot and Agents ยท Copilot license assignment

    Which two roles in the Microsoft 365 admin center allow a user to purchase Microsoft 365 Copilot licenses? (Select TWO)

    Answer and explanation

    Correct answers: B, C

    Billing Administrators make purchases and manage subscriptions, so they can buy Copilot licenses. Their role does not include assigning those licenses to users.

    Global Administrators can manage purchasing of the organization's subscriptions and products. That includes buying Microsoft 365 Copilot licenses.

  10. Question 10

    Beginner

    Perform Basic Administrative Tasks for Copilot and Agents ยท Copilot usage and adoption monitoring

    True or False: A business leader must be assigned both a Microsoft 365 Copilot license and a paid Viva Insights license to view the Microsoft Copilot Dashboard in Viva Insights.

    Answer and explanation

    Correct answer: B

    False. Microsoft's Copilot Dashboard documentation states that the dashboard is available to any customer with a Microsoft 365 or Office 365 subscription for business or enterprise and an active Exchange Online account, and that neither a paid Viva Insights license nor a Microsoft 365 Copilot license is required to view it. The analyzed population is the employees who have a Copilot license assigned, and the features shown depend on how many Copilot (or Viva Insights) licenses the tenant has. People with access open it from the Viva Insights web app by selecting Copilot Dashboard.

Related practice tests

All Microsoft practice exams